Flexense vulnerabilities
We track 8 vulnerabilities in Flexense products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on January 28, 2026.
Latest Flexense vulnerabilities
- 8.5 High severity
Sync Breeze Enterprise Server: Cross-Site Request Forgery
Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send mali
- 7.5 High severity
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote…
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process.
- 8.0 High severity
Sync Breeze Enterprise Server: Cross-Site Request Forgery
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi
- 8.0 High severity
Sync Breeze Enterprise Server: Cross-Site Request Forgery
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi
- 8.0 High severity
Sync Breeze Enterprise Server: Cross-Site Request Forgery
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi
- 8.0 High severity
Sync Breeze Enterprise Server: Cross-Site Request Forgery
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi
- 8.6 High severity
A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse…
A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer ov
- 10.0 Critical severity
A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss…
A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a special